Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
File: 001KO3R_ynAQOxfz29xQRcrOMt8.mft (raw, json)
Hash identifier: Z/HzpAasuu12Qxvook2zxUn+N1LyJAuv/hChiEdL0VA=
Subject key identifier: EB:BC:D2:9E:A7:12:E0:E8:E4:D5:70:68:64:D4:5C:C5:73:D5:D5:C0
Authority key identifier: D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF
Certificate issuer: /CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
Certificate serial: 019F927F2C6BC55DAAF8A75886E972FDC182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 05:00:35 +0000
Manifest this update: Fri 24 Jul 2026 05:00:35 +0000
Manifest next update: Sat 25 Jul 2026 05:00:35 +0000
Files and hashes: 1: 001KO3R_ynAQOxfz29xQRcrOMt8.crl (hash: CtSEho4iiVHjkr+a1R4iWTi9mJsHjmWlSXQph+1CBcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:2c:6b:c5:5d:aa:f8:a7:58:86:e9:72:fd:c1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
Validity
Not Before: Jul 24 05:00:35 2026 GMT
Not After : Jul 25 05:00:35 2026 GMT
Subject: CN=ebbcd29ea712e0e8e4d5706864d45cc573d5d5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:af:d5:1a:8a:5e:e1:6b:e3:4d:b8:28:f0:
e8:88:9a:32:b2:6e:f2:a3:18:81:9e:dc:6e:a0:80:
3e:94:b9:84:69:14:2e:63:32:0f:8e:ce:e2:f7:3f:
83:82:d3:fc:2a:b7:b4:47:58:21:39:96:ee:14:2b:
6b:4e:af:b8:4e:a5:f0:b9:3a:53:ea:f1:fb:38:fc:
51:b0:da:b3:9f:fc:89:f2:d0:ee:eb:f1:3a:91:01:
8e:ef:42:fe:da:0c:81:b3:fd:87:de:cf:37:85:4f:
58:4f:ef:3f:6c:64:f2:08:80:a8:72:a0:25:cb:e5:
19:89:9c:f3:54:16:53:30:18:12:32:94:dd:4d:b5:
fd:0a:4d:72:a9:b7:d6:23:c0:e9:fb:a4:d4:26:53:
82:4e:8e:e7:39:af:a6:df:c8:36:b9:f8:92:1d:4f:
17:39:f7:be:c6:0b:00:ab:63:92:13:ca:10:1d:83:
d0:f9:3b:43:45:3e:9d:a4:69:b3:1b:f4:fa:af:d4:
bb:fe:d8:10:aa:9a:b8:98:5d:ff:b7:8e:d2:27:a2:
70:a4:bb:7b:1c:aa:83:37:13:40:c8:ad:f7:1e:9c:
6a:57:01:d6:03:cf:f5:02:1e:57:c6:42:63:68:20:
19:03:44:92:a3:eb:b5:a1:6c:a4:b3:b2:79:44:64:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BC:D2:9E:A7:12:E0:E8:E4:D5:70:68:64:D4:5C:C5:73:D5:D5:C0
X509v3 Authority Key Identifier:
keyid:D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b3:fc:34:6a:e3:47:ac:1d:0f:f1:17:ab:20:2a:cf:13:29:
1a:e6:bf:b3:2c:5e:41:29:b2:b3:3d:1a:a1:20:d1:88:d8:a0:
2a:8a:09:2e:1c:7c:1b:9d:15:88:ba:eb:b1:6b:59:1c:cf:a7:
c2:a1:e0:5b:68:ec:75:fe:60:ba:b5:09:f3:c4:2a:b8:65:0a:
9e:25:28:bd:32:b8:59:cb:b4:c8:d3:11:6f:29:14:48:a0:3b:
90:f9:b1:58:02:de:c0:d2:dd:14:17:21:8c:b0:28:9b:cb:51:
df:12:a0:be:72:6e:1d:fc:30:b4:76:f2:06:c7:b9:00:90:aa:
93:2a:ab:00:f4:1b:f5:64:65:1d:9f:d0:65:72:cf:c7:32:10:
5b:a5:75:a9:a8:e0:10:04:64:8f:f5:80:e8:af:3b:cd:8d:f1:
83:6a:39:12:b8:4f:96:90:85:3b:16:7d:c6:53:98:2b:9c:16:
48:a3:49:cd:7f:89:da:cb:61:3d:28:a7:5e:44:1a:17:c0:23:
aa:ec:7c:69:73:87:57:f2:18:d1:ae:f9:21:17:f0:4e:b7:4c:
80:91:ca:95:44:d4:87:a5:33:32:ac:b0:a7:35:b3:af:74:76:
b6:52:7b:ba:fa:77:6a:55:f1:cc:45:95:96:75:7e:63:0b:39:
7f:3d:6a:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfyxrxV2q+KdYhuly/cGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGQ0YTNiNzQ3ZmNhNzAxMDNiMTdmM2RiZGM1MDQ1Y2Fj
ZTMyZGYwHhcNMjYwNzI0MDUwMDM1WhcNMjYwNzI1MDUwMDM1WjAzMTEwLwYDVQQD
EyhlYmJjZDI5ZWE3MTJlMGU4ZTRkNTcwNjg2NGQ0NWNjNTczZDVkNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpmv1RqKXuFr4024KPDoiJoysm7y
oxiBntxuoIA+lLmEaRQuYzIPjs7i9z+DgtP8Kre0R1ghOZbuFCtrTq+4TqXwuTpT
6vH7OPxRsNqzn/yJ8tDu6/E6kQGO70L+2gyBs/2H3s83hU9YT+8/bGTyCICocqAl
y+UZiZzzVBZTMBgSMpTdTbX9Ck1yqbfWI8Dp+6TUJlOCTo7nOa+m38g2ufiSHU8X
Ofe+xgsAq2OSE8oQHYPQ+TtDRT6dpGmzG/T6r9S7/tgQqpq4mF3/t47SJ6JwpLt7
HKqDNxNAyK33HpxqVwHWA8/1Ah5XxkJjaCAZA0SSo+u1oWyks7J5RGSi9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu80p6nEuDo5NVwaGTUXMVz1dXAMB8GA1UdIwQY
MBaAFNNNSjt0f8pwEDsX89vcUEXKzjLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84ZDgzNzItZTA3OS00ODMxLWFmZDIt
NDM3OTM0YzU4NDUzLzEvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84ZDgzNzItZTA3OS00ODMxLWFmZDItNDM3OTM0YzU4NDUz
LzEvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzLP8NGrj
R6wdD/EXqyAqzxMpGua/syxeQSmysz0aoSDRiNigKooJLhx8G50ViLrrsWtZHM+n
wqHgW2jsdf5gurUJ88QquGUKniUovTK4Wcu0yNMRbykUSKA7kPmxWALewNLdFBch
jLAom8tR3xKgvnJuHfwwtHbyBse5AJCqkyqrAPQb9WRlHZ/QZXLPxzIQW6V1qajg
EARkj/WA6K87zY3xg2o5ErhPlpCFOxZ9xlOYK5wWSKNJzX+J2sthPSinXkQaF8Aj
qux8aXOHV/IY0a75IRfwTrdMgJHKlUTUh6UzMqywpzWzr3R2tlJ7uvp3alXxzEWV
lnV+Yws5fz1qKQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:57 2026 by rpki-client